5
5
6
6
KMS MRK keyring interacts with AWS Key Management Service (AWS KMS) to create, encrypt,
7
7
and decrypt data keys using AWS KMS defined Customer Master Keys (CMKs).
8
- This example creates a KMS MRK Keyring and then encrypts a custom input EXAMPLE_DATA
8
+ This example creates a KMS MRK Multi Keyring and then encrypts a custom input EXAMPLE_DATA
9
9
with an encryption context. This example also includes some sanity checks for demonstration:
10
10
1. Ciphertext and plaintext data are not the same
11
11
2. Encryption context is correct in the decrypted message header
@@ -51,7 +51,7 @@ def encrypt_and_decrypt_with_keyring(
51
51
kms_key_id,
52
52
mrk_replica_key_id,
53
53
second_region)
54
- :param mrk_key_id: KMS Key identifier for an AWS KMS multi-Region key (MRK) located in your
54
+ :param mrk_key_id: KMS Key identifier for an AWS KMS multi-region key (MRK) located in your
55
55
default region
56
56
:type mrk_key_id: string
57
57
:param kms_key_id: KMS Key identifier for a KMS key, possibly located in a different region
@@ -119,7 +119,7 @@ def encrypt_and_decrypt_with_keyring(
119
119
"Ciphertext and plaintext data are the same. Invalid encryption"
120
120
121
121
# 6. Decrypt your encrypted data using the same AwsKmsMrkMultiKeyring you used on encrypt.
122
- # It will decrypt the data using the generator KMS key since that is the first available
122
+ # It will decrypt the data using the generator KMS MRK key since that is the first available
123
123
# KMS key on the keyring that is capable of decrypting the data.
124
124
plaintext_bytes , dec_header = client .decrypt (
125
125
source = ciphertext ,
@@ -138,7 +138,7 @@ def encrypt_and_decrypt_with_keyring(
138
138
139
139
# Demonstrate that a single AwsKmsMrkKeyring configured with a replica of the MRK from the
140
140
# multi-keyring used to encrypt the data is also capable of decrypting the data.
141
- # Not shown in this example: A KMS Keyring created with `kmsKeyArn ` could also
141
+ # Not shown in this example: A KMS Keyring created with `kms_key_id ` could also
142
142
# decrypt this message.
143
143
# (This is an example for demonstration; you do not need to do this in your own code.)
144
144
0 commit comments